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Top Stories 

• Amtrak resumed service May 18 along the Northeast Corridor from Washington to Boston 
in compliance with Federal safety orders following last week’s fatal derailment that killed 
8 people and injured more than 200- Associated Press (See item 5) 

• The FBI reported that a cybersecurity researcher admitted to overwriting code on an 
airliner’s Thrust Management Computer to issue a “climb” command that resulted in the 
aircraft’s changing direction by using a Cat6 ethernet cable to breach the network through 
the in-flight entertainment (IFF) system. - Softpedia (See item 6) 

• One Marine was killed and 21 other military personnel were injured when a MV-22 Osprey 
aircraft crashed during a hard-landing at Bellows Air Force Station in Waimanalo, Hawaii, 
during a training exercise May 17. - Honolulu Star-Advertiser (See item 1^) 

• A shootout involving 5 rival motorcycle gangs began in the bathroom of the Twin Peaks 
restaurant, in Texas, and ended in the parking lot May 17 resulting in 9 deaths and at least 
18 injuries.- Dallas Morning News; Associated Press (See item 18) 
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Energy Sector 



1 . May 1 7, KSTU 13 Salt Lake City - (Utah) Driver flown to hospital, thousands of 
gallons of crude oil spilled after semitrailer crash. The driver of a semi-truck hauling 
about 12,012 gallons of crude oil crashed and rolled on Wells Draw Road in Duchesne 
County May 16, spilling a majority of the oil into a dry riverbed. The driver was 
transported to an area hospital with back and head injuries. 

Source: http://fox 1 3now .com/20 1 5/05/17/driver-flown-to-hospital-thousands-of- 
gallons -of- crude-oil- spilled- after- semitrailer-crash/ 

2. May 15, Lexington Herald-Leader - (HdXiondl) Fourth man is found guilty in 
Kentucky oil investment scheme. The U.S. Attorney’s Office in Kentucky announced 
May 15 that a Federal jury found a fourth man guilty for his role in a $3 million oil 
investment scheme that defrauded over 200 investors nationwide. The defendant 
worked out of Los Angeles selling fraudulent investments in oil wells in Monroe, 
Barren, and Cumberland counties in Kentucky. 

Source: http://www.kentuckv.eom/2015/05/15/3854075 fourth-man-is-found-guilty- 
in.html 
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Chemical Industry Sector 

See item 11 
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Nuclear Reactors, Materials, and Waste Sector 

3. May 15, Berkeley Patch - (New Jersey) Oyster Creek back online after latest 

unplanned shutdown. Exelon officials reported May 15 that the Oyster Creek Nuclear 
Generating Station in Lacey Township was back to full power following an automatic 
shutdown that occurred May 7 due to a problem with the electrical monitoring system 
in the non-nuclear side of the plant. The monitoring system was modified, inspected, 
and tested before the plant resumed operation. 

Source: http://patch.com/new-iersev/berkelev-ni/ovster-creek-back-online-after-latest- 
unplanned-shutdown 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. May 15, Reuters - (International) Finter Bank Zurich to pay $5.4 million in deal 
with U.S. over tax offenses. Finter Bank Zurieh reaehed a settlement with the U.S. 
Department of Justice May 15 in which the bank agreed to pay $5.4 million to avoid 
U.S. prosecution for helping U.S. clients open, conceal, and maintain bank accounts, 
undeclared assets, and income from U.S. tax authorities from 2008 - 201 1. The bank 
provided detailed information on designated accounts, agreed to close accounts that do 
not meet U.S. obligations, and agreed to implement new controls to stop future 
misconduct. 

Source: http://www.reuters.eom/article/2015/05/15/banks-iss-finter- 
idUSLlN0Y61BV20150515 
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Transportation Systems Sector 

5. May 18, Associated Press - (Pennsylvania) Amtrak service restored between 
Philadelphia and New York after deadly crash. Amtrak resumed service May 18 
along the Northeast Corridor from Washington to Boston in compliance with Federal 
safety orders following last week’s fatal derailment that killed 8 people and injured 
more than 200. Federal Railroad Administration officials reported that the automatic 
train control system along the northbound tracks was fully operational. 

Source: http://www.foxnews.eom/us/2015/05/18/amtrak-service-between-philadelphia- 
and-new-york-restored-after-deadly-crash/ 

6. May 18, Softpedia - (National) Researchers hacked airplane controls mid-flight, 
FBI affidavit reveals. The FBI reported that a cybersecurity researcher admitted to 
overwriting code on an airliner’s Thrust Management Computer to issue a “climb” 
command that resulted in the aircraft’s changing direction by using a Cat6 ethernet 
cable to breach the network through the in-flight entertainment (IFF) system. The 
researcher had experimented with exploits about 15-20 times after discovering 
vulnerabilities in the IFF systems on Boing and Airbus aircraft. 

Source: http://news.softpedia.com/news/Researcher-Hacked-Airplane-Controls-Mid- 
Flight-FBI-Affidavit-Reveals-481488.shtml 

7. May 17, KCTV 5 Kansas City - (Missouri; Kansas) Violent weather leaves damages, 
power outages and flooding. Heavy storms throughout the Kansas City area led to 
widespread flooding May 17, prompting authorities to close the Fishing River Bridge 
over Highway 69 in Clay County, as well as the voluntary evacuation of 190 people in 
Mosby. The storm also caused the derailment or tipping of 134 freight train cars and up 
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to 8,000 power outages. 

Source: http://www.kctv5.com/storv/29084816/violent-weather-leaves-some-damage- 
power-outages-and-flooding 

8. May 17, Los Angeles Times - (California) Plane makes emergency landing at LAX. 
An airport official reported that a Delta Air Lines flight bound for Atlanta returned to 
Los Angeles shortly after take-off to make an emergency landing May 17 due to an 
apparent “electrical smell in the cabin”. No injuries were reported. 

Source: http://www.latimes.com/local/lanow/la-me-ln-plane-makes-emergency- 
landing-at-lax-20150517-storv.html 

9. May 17, Fox News; Associated Press- (Texas) 4 killed in crash of small plane in 
Texas. The Federal Aviation Administration reported that a single-engine Piper PA-24 
aircraft crashed shortly after takeoff from Kestrel Air Park in Texas and killed 4 people 
May 16. No injuries or damages were reported on the ground. 

Source: http://www.foxnews.com/us/2015/05/17/4-killed-in-crash-small-plane-in-texas/ 

10. May 15, KYW 3 Philadelphia - (Pennsylvania) Worker passes out from ‘syrup-Uke’ 
smell at NJ postal facility. One mail distribution center employee passed out and 1 1 
others reported feeling nauseous after they detected a “syrup-like” odor at a U.S. Postal 
Service facility in Hamilton Township May 15. A township HAZMAT team swept the 
building and found nothing, and the incident remains under investigation. 

Source: http://philadelphia.cbslocal.eom/2015/05/15/hazmat-scene-at-post-office-in- 
new-jersey/ 
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Food and Agriculture Sector 

11. May 16, Hawaii News Now - (Hawaii) Chemical spill kills hundreds of fish in Aiea. 
Hawaii State Department of Health workers counted over 500 dead fish May 12 in a 
drainage ditch along the Pearl Harbor bike path in , after traces of a 



Source: http://www.hawaiinewsnow.eom/storv/29080418/chemical-spill-kills- 
hundreds-of-fish-in-aiea 
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Water and Wastewater Systems Sector 

12. May 17, Springfield News-Sun - (Ohio) Urhana to spend $500L to repair water 
tower. The Urbana City Council approved a $500,000 repair and maintenance contract 
with Atlanta’s Utility Service Company to repair the city’s 500,000 gallon East Lawn 
Tower. Officials reported that the tower’s outage will not impact the city’s water 
system. 
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Source: http://www.springfieldnewssun.eom/news/news/local/urbana-to-spend-500k- 
to-repair- water- tower/nmHW 6/ 



For another story, see item 11 



r Return to top i 



Healthcare and Public Health Sector 

13. May 15, WTAE 4 Pittsburgh - (Pennsylvania) UPMC: Some patients’ personal 
information may have been compromised in data theft. University of Pittsburgh 
Medical Center (UPMC) officials announced May 15 that the personal information, 
including Social Security numbers, of approximately 2,200 patients treated at various 
UPMC emergency departments may have been compromised after records were 
illegally disclosed by an employee of the third-party billing company. Medical 
Management LLC. The medical center was notified after the company discovered that a 
former call center employee copied information from a billing system over the course 
of 2 years. 

Source: http://www.wtae.com/news/upmc-alerts-patients-about-data-theft/33042164 
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Government Facilities Sector 

14. May 18, WVNS 59 Lewisburg - (West Virginia) Power restored in Welch, WV. 
Service was restored May 18 to thousands of McDowell County customers after a 
power outage caused the dismissal of Welch Elementary, Fall River Elementary, Mount 
View Middle, and Mount View High schools. 

Source: http://www.wvnstv.com/storv/2909Ql 11/power-outage-closes-schools-in- 
welch-wv 

15. May 17, Naples Daily News - (Florida) Fire still rage in Big Cypress National Park, 
visibility not a problem Sunday. Crews reached 5 percent containment May 17 of the 
Mud Fake Complex Fire which burned over 12,000 acres in Big Cypress National Park 
in Florida. No property damages were reported. 

Source: http://www.naplesnews.com/news/environment/fires-still-rage-in-big-cypress- 
national-park-visibility-not-a-problem-sunday 43483 1 87 

16. May 17, Honolulu Star-Advertiser - (^d,wax\) 1 marine dead, several injured in 
Osprey hard-landing at Bellows. One Marine was killed and 21 other military 
personnel were injured when a MV-22 Osprey aircraft crashed during a hard-landing at 
Bellows Air Force Station in Waimanalo, Hawaii, during a training exercise May 17. 
Authorities are investigating the cause of the crash. 

Source: 

http://www.staradvertiser.com/news/breaking/2015Q517 Downed military aircraft re 
ported in Bellows Air Force Station area.html?id=304055751 
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17. May 15, Softpedia - (Pennsylvania) China-based hackers launch attack on Penn 
State College of Engineering. The president of Pennsylvania State University 
announced May 15 that intruders gained access to the computer network at the 
Pennsylvania State College of Engineering in November 2012, compromising the 
personally identifiable information, including Social Security numbers, of 
approximately 18,000 individuals and about 500 public and private research partners. 
Officials isolated and took the network offline while the investigation continues. 
Source: http://news.softpedia.com/news/China-Based-Hackers-Launch-Attack-on- 
Penn-State-College-of-Engineering-48 1348. shtml 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

Nothing to report 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



18. May 18, Dallas Morning News; Associated Press - (Texas) 9 bikers killed in rival 
gang shootout outside Waco restaurant. A shootout involving 5 rival motorcycle 
gangs began in the bathroom of the Twin Peaks restaurant at the Central Texas 
Marketplace, and ended in the parking lot of the restaurant May 17 resulting in 9 deaths 
and at least 18 injuries. Waco police reported to the scene and returned fire after gang 
members began shooting at officers, while the shopping center was shut down 
indefinitely. 

Source: http://www.dallasnews.eom/latest/20150517-9-bikers-killed-in-rival-gang- 
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shootout-outside-waco-restaurant.ece 



19. May 17, Associated Press - (National) 2 men convicted in scheme that defrauded 
Home Depot stores out of more than $250,000. Officials reported May 17 that 2 New 
York men were convicted May 15 of 



Source: http://www . greenfieldreporter.com/view/story/07fl a823 8d5f497 3b0edcd20 1 4f9 
2055/NJ— Home-Depot-Fraud-Scheme 

20. May 17, Associated Press - (Louisiana) Fire in main electrical panel forces 
evacuation of 134-room hotel in downtown New Orleans. The Wyndham La Belle 
Maison Hotel in New Orleans remained closed May 17, nearly 24 hours after a fire that 
began in an electrical panel May 16 forced the evacuation and temporary displacement 
of more than 124 guests. 

Source: http ://www . greenfieldreporter. com/vie w/story/e0c8 8da24a0e4f5 a928a9f5 2 1 acd 
41ea/LA— New-Orleans-Hotel-Fire 

21. May 1 7, KXAN 36 Austin - (Texas) AFD blames lightning for apartment fire, 
forcing evacuations. Dozens of residents at the Zilkr on the Park apartment complex in 
Austin were evacuated after lightning struck the hotel and caused a roof fire May 17. 

No injuries were reported and officials estimated damages to total $700,000. 

Source: http://kxan.eom/2015/05/17/apartment-residents-still-displaced-after-2-alarm- 
fire/ 
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Dams Sector 

Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@ hq .dhs. gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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